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Amendments to the Claims: 

1 . (Currently Amended) A computerized method comprising: 

defining a protection domain for a set of errors using an association between data 
and ajirst integrity metadata, the protection domain to protect data traversing an input/output 
(I/O) datapath having a storage device and a first generation integrity point for a host as 
opposite endpoints; and 

defining a first sub-domain nested within the protection domain using an association 
between the data and a_second integrity metadata, the first sub-domain to further protect 
data traversing a portion of the datapath having a second generation integrity point as an 
endpoint. 

2. (Currently Amended) The computerized method of claim 1 further comprising: 
defining a second sub-domain nested within the protection domain using an 

association between the data and athird integrity metadata, the second sub-domain to 
further protect data traversing a portion of the datapath having a third generation integrity 
point as an endpoint. 

3. (Original) The computerized method of claim 2, wherein the first and second 
sub-domains are nested in the protection domain as a hierarchy. 

4. (Original) The computerized method of claim 2, wherein the third integrity 
metadata is operable to detect a subset of the set of data errors. 

5. (Original) The computerized method of claim 1 , wherein the first integrity 
metadata is operable to detect a first subset of the set of data errors. 

6. (Original) The computerized method of claim 5, wherein the second integrity 
metadata is operable to detect a second subset of the set of data errors. 

7. (Original) The computerized method of claim 6, wherein the first and second 
subsets together are operable to detect the set of data errors. 

8. (Original) The computerized method of claim 1 , wherein the portion of the 
datapath protected by the first sub-domain has one of the storage device and host as an 
opposite endpoint. 



2 



Attorney Docket No. 1881 19/US 



9. (Original) The computerized method of claim 1 , wherein the set of data errors 
comprises bit corruption, misdirected I/O, and phantom I/O. 

10. (Original) The computerized method of claim 1 further comprising: 
detecting a data error within the protection domain using at least one of the first and 

second integrity metadata; and 

identifying a portion of the I/O data path as a potential source of the data error. 

1 1 . (Original) The computerized method of claim 1 0, wherein detecting a data 
error comprises: 

validating the data at one of the first and second integrity points. 

12. (Original) The computerized method of claim 10 further comprising: 
retrying a data transfer at the potential source of the data error. 

13. (Original) The computerized method of claim 12 wherein retrying comprises: 
resuming the data transfer using a replica. 

14. (Original) The computerized method of claim 10 further comprising: 
retrying a data transfer at an integrity point prior to the potential source of the data 

error. 

15. (Original) The computerized method of claim 1 , wherein a replication point is 
co-located with at least one of the first and second generation integrity points. 

16. (Original) The computerized method of claim 1 further comprising: 
establishing the first generation integrity point for the host; and 

establishing the second generation integrity point for an intermediary component in 
the datapath. 

17. (Currently Amended) A n article of manufacture comprising: 

a computer - r e adab le computer usable medium having computer readable 
instructions embodied therein to cause a processor to execute a method comprising: 

defining a protection domain for a set of errors using an association between data 
and ajirst integrity metadata, the protection domain to protect data traversing an input/output 
(I/O) datapath having a storage device and a first generation integrity point for a host as 
opposite endpoints; and 
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defining a first sub-domain nested within the protection domain using an association 
between the data and a_second integrity metadata, the first sub-domain to further protect 
data traversing a portion of the datapath having a second generation integrity point as an 
endpoint. 

1 8. (Currently Amended) The comput e r - readab le m e d i um article of manufacture 
of claim 17, wherein the method further comprises: 

defining a second sub-domain nested within the protection domain using an 
association between the data and athird integrity metadata, the second sub-domain to 
further protect data traversing a position of the datapath having a third generation integrity 
point as an endpoint. 

1 9. (Currently Amended) The comput e r - r e adabl e m e d i um article of manufacture 
of claim 18, wherein the first and second sub-domains are nested in the protection domain 
as a hierarchy. 

20. (Currently Amended) The computer - r e ad a b le m e d i um article of manufacture 
of claim 18, wherein the third integrity metadata is operable to detect a subset of the set of 
data errors. 

21 . (Currently Amended) The comput e r - r e adabl e m e dium article of manufacture 
of claim 17, wherein the first integrity metadata is operable to detect a first subset of the set 
of data errors. 

22. (Currently Amended) The comput e r - r e adab le m e d i um article of manufacture 
of claim 21 , wherein the second integrity metadata is operable to detect a second subset of 
the set of data errors. 

23. (Currently Amended) The comput e r - r e adab le m e d i um article of manufacture 
of claim 22, wherein the first and second subsets together are operable to detect the set of 
data errors. 

24. (Currently Amended) The computer - r e adabl e m e dium article of manufacture 
of claim 17, wherein the portion of the datapath protected by the first sub-domain has one of 
the storage device and host as an opposite endpoint. 
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25. (Currently Amended) The computer - r e adab le m e d i um article of manufacture 
of claim 17, wherein the set of data errors comprises bit corruption, misdirected I/O, and 
phantom I/O. 

26. (Currently Amended) The comput e r - r e adabl e m e d i um article of manufacture 
of claim 17, wherein the method further comprises: 

detecting a data error within the protection domain using at least one of the first and 
second integrity metadata; and 

identifying a portion of the I/O data path as a potential source of the data error. 

27. (Currently Amended) The comput e r - r e adab le m e dium article of manufacture 
of claim 26, wherein detecting a data error comprises: 

validating the data at one of the first and second integrity points. 

28. (Currently Amended) The computer - r e adab le m e d i um article of manufacture 
of claim 26, wherein the method further comprises: 

retrying a data transfer at the potential source of the data error. 

29. (Currently Amended) The comput e r - r e adab le medium article of manufacture 
of claim 28 wherein retrying comprises: 

resuming the data transfer using a replica. 

30. (Currently Amended) The comput e r - readabl e m e d i um article of manufacture 
of claim 26, wherein the method further comprises: 

retrying a data transfer at an integrity point prior to the potential source of the data 

error. 

31. (Currently Amended) The computer - readab le m e dium article of manufacture 
of claim 17, wherein a replication point is co-located with at least one of the first and second 
generation integrity points. 

32. (Currently Amended) The comput e r - roadabl e m e dium article of manufacture 
of claim 17, wherein the method further comprises: 

establishing the first generation integrity point for the host; and 
establishing the second generation integrity point for an intermediary component in 
the datapath. 



5 



Attorney Docket No. 1 881 1 9/US 



33. (Currently Amended) An apparatus comprising: 

means for defining a protection domain for a set of errors using an association 
between data and ajfirst integrity metadata, the protection domain to protect data traversing 
an input/output (I/O) datapath having a storage device and a first generation integrity point 
for a host as opposite endpoints; and 

means for defining a first sub-domain nested within the protection domain using an 
association between the data and a_second integrity metadata, the first sub-domain to 
further protect data traversing a portion of the datapath having a second generation integrity 
point as an endpoint. 

34. (Currently Amended) The apparatus of claim 33 further comprising: 
means for defining a second sub-domain nested within the protection domain using 

an association between the data and athird integrity metadata, the second sub-domain to 
further protect data traversing a portion of the datapath having a third generation integrity 
point as an endpoint. 

35. (Original) The apparatus of claim 34, wherein the first and second sub- 
domains are nested in the protection domain as a hierarchy. 

36. (Original) The apparatus of claim 34, wherein the third integrity metadata is 
operable to detect a subset of the set of data errors. 

37. (Original) The apparatus of claim 33, wherein the first integrity metadata is 
operable to detect a first subset of the set of data errors. 

38. (Original) The apparatus of claim 37, wherein the second integrity metadata is 
operable to detect a second subset of the set of data errors. 

39. (Original) The apparatus of claim 38, wherein the first and second subsets 
together are operable to detect the set of data errors. 

40. (Original) The apparatus of claim 33, wherein the portion of the datapath 
protected by the first sub-domain has one of the storage device and host as an opposite 
endpoint. 

41 . (Original) The apparatus of claim 33, wherein the set of data errors comprises 
bit corruption, misdirected I/O, and phantom I/O. 
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42. (Original) The apparatus of claim 33 further comprising: 

means for detecting a data error within the protection domain using at least one of 
the first and second integrity metadata; and 

means for identifying a portion of the I/O data path as a potential source of the data 

error. 

43. (Original) The apparatus of claim 42, wherein the means for detecting a data 
error comprises: 

means for validating the data at one of the first and second integrity points. 

44. (Original) The apparatus of claim 42 further comprising: 

means for retrying a data transfer at the potential source of the data error. 

45. (Original) The apparatus of claim 44 wherein the means for retrying 
comprises: 

means for resuming the data transfer using a replica. 

46. (Original) The apparatus of claim 42 further comprising: 

means for retrying a data transfer at an integrity point prior to the potential source of 
the data error. 

47. (Original) The apparatus of claim 33, wherein a replication point is co-located 
with at least one of the first and second generation integrity points. 

48. (Original) The apparatus of claim 33 further comprising: 

means for establishing the first generation integrity point for the host; and 
means for establishing the second generation integrity point for an intermediary 
component in the datapath. 
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